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Description 



SYSTEM AND METHOD FOR FILE 

SERVICES 

Field of Invention 

[0001] The present invention generally relates to file movement 
systems, and more particularly, to a system and method 
for combining electronic file movement service compo- 
nents. 

Background of Invention 

[0002] As physical file systems are becoming increasingly cost 
prohibitive, many enterprises currently use electronic file 
management as their preferred data maintenance system. 
However, new challenges exist with efficiently and se- 
curely moving electronic data files. For example, chal- 
lenges exist with securing file content during wire and 
wireless transmission because, as files are moved elec- 
tronically, the possibility of eavesdroppers and line tap- 
ping increases. To minimize these concerns, security ex- 
perts developed encryption, decryption, and file compres- 



sion software, which resulted in the need for companies to 
obtain new software. Moreover, additional software 
needed to be developed for proper routing, ownership 
tracking, and permissible access of electronic files. Ac- 
cordingly, a long felt need exists in the electronic file in- 
dustry for a comprehensive system for securely and effi- 
ciently moving files electronically. 
[0003] Furthermore, as enterprises were forced to deal with each 
new file transmission challenge, software was subse- 
quently developed or acquired to solve each new problem. 
As such, file service functionality has often been created 
or pieced together for each particular file transmission 
development or improvement. Due in part to the gradual 
development, file service interfaces and cross- 
functionalities are not optimal. Accordingly, a need exists 
for a complete, packaged utility that meets generic file 
service needs from end-to-end, builds file service needs 
over and over again based on changing enterprise de- 
mands and includes an adaptable, scalable, generic archi- 
tecture that supports file services. 
Summary of Invention 

[0004] Th e invention includes a comprehensive, generic, enter- 
prise solution which facilitates file and message delivery, 



along with managing, tracking and moving bulk data, 
through the integration of multiple software products and 
functional components. The packaged system may incor- 
porate user-defined value added services to the trans- 
ported data including, for example, user authentication, 
access authorization, encryption and compression. 
[0005] The invention may include at least one of the following 
functional components which may include various sub- 
components. The File Transfer Services component trans- 
mits or receives a file on request and may interact with 
centralized file management hub components for file 
routing and tracking information. The File Routing and 
Workflow component may route the file through a network 
and provide the routing information to File Transfer nodes 
to route/schedule the file transfer to various destinations 
using the supported file transfer methods. The File Trans- 
formation component may apply an enterprise's logic to 
transform or validate file content, wherein a transforma- 
tion map may be defined (e.g., inputs, outputs, validation 
rules, etc.) and may attach to the file. The Tracking and 
Monitoring component may provide end-to-end tracking 
of a file and role based multi layered tracking information 
of a file. The Parameter and Configuration Management 



component is a centralized component that may be a 
gateway to store/retrieve configuration information such 
as, for example, an enterprise's access control to the sys- 
tem, file transfer routing information, file retention infor- 
mation, and communication channel parameter informa- 
tion through a network (e.g., Internet or Intranet). 
Brief Description of Drawings 

[0006] a more complete understanding of the present invention 
may be derived by referring to the detailed description 
and claims when considered in connection with the Fig- 
ures, where like reference numbers refer to similar ele- 
ments throughout the Figures, and: 

[0007] Figure 1 illustrates a block diagram of an exemplary File 
Services System in accordance with the present invention; 
and, 

[0008] Figure 2 illustrates a block diagram of an exemplary cen- 
tralized file management hub system in accordance with 

the present invention. 
Detailed Description 

[0009] The detailed description of exemplary embodiments of 

the invention herein makes reference to the accompanying 
Figures, which depict the exemplary embodiment by way 



of illustration and its best mode. While these exemplary 
embodiments are described in sufficient detail to enable 
those skilled in the art to practice the invention, it should 
be understood that other embodiments may be realized 
and that logical and mechanical changes may be made 
without departing from the spirit and scope of the inven- 
tion. Thus, the detailed description herein is presented for 
purposes of illustration only and not of limitation. For ex- 
ample, the steps recited in any of the method or process 
descriptions may be executed in any order and are not 
limited to the order presented and/or other steps may be 
added or omitted while still attaining the same or a similar 
result. For the sake of brevity, certain sub-components of 
the individual operating components, conventional data 
networking, application development and other functional 
aspects of the systems may not be described in detail 
herein. Furthermore, the connecting lines depicted in the 
various Figures contained herein are intended to represent 
exemplary functional relationships, interfaces and/or 
physical couplings between the various elements. It 
should be noted that many alternative or additional func- 
tional relationships or physical connections might be 
present in a practical system. 



[0010] For the sake of brevity, conventional data networking, ap- 
plication development and other functional aspects of the 
systems (and components of the individual operating 
components of the systems) may not be described in de- 
tail herein. Furthermore, the connecting lines shown in the 
various figures contained herein are intended to represent 
exemplary functional relationships and/or physical cou- 
plings between the various elements. It should be noted 
that many alternative or additional functional relationships 
or physical connections may be present in a practical sys- 
tem. 

[0011] As used herein, "enterprise" includes any user or benefi- 
ciary of the present invention such as, for example, an in- 
dividual, an employee, a group, entity, organization, char- 
ity, business (e.g., corporation, a partnership, conglomer- 
ate), software, hardware and/or the like. As used herein, a 
"user" may include any person utilizing entry points into 
the system, wherein the user may act on behalf of a host 
and may be employed or contracted to implement the 
present invention for the benefit of a host. The user may 
be an individual, group, employee, enterprise, contractor, 
software and /or hardware. 

[0012] | n an exemplary embodiment and with reference to Figure 



1, File services system 5 may include one or more func- 
tional components wherein each functional component 
may include any suitable hardware and/or software con- 
figured to perform the respective functions discussed 
herein. The functional components may be integrated us- 
ing a common, open Messaging Infrastructure 10 and the 
components may be divided or sub-divided over a num- 
ber of potentially geographically dispersed servers. The 
various system components discussed herein may include 
one or more of the following: a host server or other com- 
puting systems including a processor for processing digi- 
tal data; a memory coupled to said processor for storing 
digital data; an input digitizer coupled to the processor 
for inputting digital data; an application program stored in 
said memory and accessible by said processor for direct- 
ing processing of digital data by said processor; a display 
device coupled to the processor and memory for display- 
ing information derived from digital data processed by 
said processor; and a plurality of databases. As those 
skilled in the art will appreciate, user computer may in- 
clude an operating system (e.g., Windows NT, 
95/98/2000, OS2, UNIX, Linux, Solaris, MacOS, etc.) as 
well as various conventional support software and drivers 



typically associated with computers. 
3 1 In general, the functional components may include, for 
example, File Transfer Services 30, a File Transformation 
component 40, Data of Record 50, Centralized File Man- 
agement Hub 60, along with application server 15, web 
server 20 and parameter manager interface device 25. As 
shown in Figure 2, the Centralized File Management Hub 
60 may include, for example, a Parameter and Configura- 
tion Management System 62, a Tracking and Monitoring 
System 64 and a File Routing and Workflow System 66. 
Centralized services may also include the database of 
records 50. The communication within File services sys- 
tem 5 components may utilize a single, common messag- 
ing schema for notification messages, logging informa- 
tion, receiving configuration parameters and for initiating 
workflows. Industry standard messaging schemas may in- 
clude, for example, SOAP, XML, and the like. In one em- 
bodiment, the large files and bulk data may be transmit- 
ted from File Transfer Services 30 to File Transformation 
component 40 (and vice versa), or simply from File Trans- 
fer Service 30 to another File Transfer Service 30 for deliv 
ery. Regarding large files or bulk data, one skilled in the 
art will appreciate that file sizes have increased exponen- 



tially over recent years due in part to, for example, the in- 
creased network bandwidth, hardware processing capabil- 
ity, and disk storage capacity. As such, file sizes may ap- 
proach 15 Gigabytes, however, the present invention con- 
templates files of any size, now used or developed in the 
future. The bulk data may be minimally transported to 
preserve network bandwidth and may be transported us- 
ing a suitable file transport protocol. Suitable file trans- 
port protocols may include, for example, HTTP/S 
(HyperText Transport Protocol - Secure), FTP (File Transfer 
Protocol), and the like. 
[0014] The user entry points may include any communication 

hardware and/or software. In an exemplary embodiment, 
access is through a network or the Internet through a 
commercially available web-browser software package. As 
used herein, the term "network" may include any elec- 
tronic communications system. Communication among 
the components, enterprise, controller and/or user in ac- 
cordance with the present invention may be accomplished 
through any suitable communication channels, such as, 
for example, a telephone network, an extranet, an in- 
tranet, Internet, point of interaction device (point of sale 
device, personal digital assistant, cellular phone, kiosk, 



etc.), online communications, off-line communications, 
wireless communications, transponder communications, 
local area network (LAN), wide area network (WAN), net- 
worked or linked devices and/or the like. Moreover, al- 
though the invention is frequently described herein as be- 
ing implemented with TCP/IP communications protocols, 
the invention may also be implemented using IPX, Ap- 
pletalk, IP-6, NetBIOS, OSI or any number of existing or 
future protocols. If the network is in the nature of a public 
network, such as the Internet, it may be advantageous to 
presume the network to be insecure and open to eaves- 
droppers. Specific information related to the protocols, 
standards, and application software utilized in connection 
with the Internet is generally known to those skilled in the 
art and, as such, need not be detailed herein. See, for ex- 
ample, Dilip Naik, "Internet Standards and Protocols" 
(1998); "Java 2 Complete", various authors, (Sybex 1999); 
Deborah Ray and Eric Ray, "Mastering HTML 4.0" (1997); 
and Loshin, "TCP/IP Clearly Explained" (1997) and David 
Gourley and Brian Totty, "HTTP, The Definitive Guide" 
(2002), the contents of which are hereby incorporated by 
reference. 

[0015] The various system components may be independently, 



separately or collectively suitably coupled to the network 
via data links which includes, for example, a connection to 
an Internet Service Provider (ISP) over the local loop as is 
typically used in connection with standard modem com- 
munication, cable modem, Dish networks, ISDN, Digital 
Subscriber Line (DSL), or various wireless communication 
methods, see e.g., Gilbert Held, "Understanding Data 
Communications" (1996), hereby incorporated by refer- 
ence. It is noted that the network may be implemented as 
other types of networks, such as an interactive television 
(ITV) network. Moreover, the system contemplates the 
use, sale or distribution of any goods, services or infor- 
mation over any network having similar functionality de- 
scribed herein. 

[0016] The computers discussed herein may provide a suitable 
website or other Internet-based graphical user interface 
which is accessible by users. In one embodiment, the Mi- 
crosoft Internet Information Server (IIS), Microsoft Trans- 
action Server (MTS), and Microsoft SQL Server, are used in 
conjunction with the Microsoft operating system, Mi- 
crosoft NT web server software, a Microsoft SQL Server 
database system, and a Microsoft Commerce Server. Addi- 
tionally, components such as Access or Microsoft SQL 



Server, Oracle, Sybase, Informix MySQL, Interbase, etc., 
may be used to provide an Active Data Object (ADO) com- 
pliant database management system. 
[0017] A n y 0 f the communications, inputs, storage, databases or 
displays discussed herein may be facilitated through a 
website having web pages. The term "web page" as it is 
used herein is not meant to limit the type of documents 
and applications that might be used to interact with the 
user. For example, a typical website might include, in ad- 
dition to standard HTML documents, various forms, Java 
applets, JavaScript, active server pages (ASP), common 
gateway interface scripts (CGI), extensible markup lan- 
guage (XML), dynamic HTML, cascading style sheets (CSS), 
helper applications, plug-ins, and the like. A server may 
include a web service that receives a request from a web 
server, the request including a URL 
(http://yahoo.com/stockquotes/ge) and an IP address 
(123.56.789). The web server retrieves the appropriate 
web pages and sends the data or applications for the web 
pages to the IP address. Web services are applications that 
are capable of interacting with other applications over a 
communications means, such as the internet. Web ser- 
vices are typically based on standards or protocols such 



as XML, SOAP, WSDL and UDDI. Web services methods are 
well known in the art, and are covered in many standard 
texts. See, e.g., Alex Nghiem, "IT Web Services: A 
Roadmap for the Enterprise" (2003), hereby incorporated 
herein by reference. 
[0018] pile Transfer Services 30 may include any suitable hard- 
ware and/or software suitably configured to transfer or 
receive files and to include multiple different vendor 
products to support a range of file transport and messag- 
ing protocols thereby providing flexibility in the method 
of communicating to the enterprise. In one embodiment, 
File Transfer Services 30 includes, one or more File Trans- 
fer Agent 39, one or more File Transfer Application Server 
32, along with one or more web server 34 that interfaces 
with Internet 36 and/or intranet 38. File Transfer Agent 
39 may include different types of file transfer agents and 
File Transfer Agent 39 may include one or more of each 
type of transfer agent. Continuing with reference to Figure 
1, File Transfer Services 30 may also be configured to in- 
clude user entry points into the File services system 5 
such as, for example, Intranet 38 or Internet 36. Intranet 
38 may interface with a File Transfer Application Server 
32, and Internet 36 may interface with a Web Server 34 



that in turn may also interface with a File Transfer Appli- 
cation Server 32. File Transfer Application Server 32 may 
interface with Messaging Infrastructure 10. File Transfer 
Services 30 may include a File Transfer Agent 39 that may 
interface with Messaging Infrastructure 10. 

[0019] | n an exemplary embodiment, File Transfer Services 30, 

under the direction of File Transfer Agent 39, may interact 
via Messaging Infrastructure 10 with other File service 5 
components. For example, File Transfer Agent 39 may 
transmit or receive files on request through user entry 
points (e.g., Intranet 38 or Internet 36) and interact with 
Centralized File Management Hub 60 for file routing and 
tracking information. File routing and tracking information 
may be completed by Centralized File Management Hub 
60 that may use Messaging Infrastructure 10 to send re- 
quests to distributed components (i.e., File Transfer 
Agents) to perform workflow tasks. Distributed compo- 
nents, such as File Transfer Agents, may use Messaging 
Infrastructure 10 to notify Centralized File Management 
Hub 60 of workflow events (e.g. file transfer, file transfor- 
mation, processing exceptions, etc). 

[0020] Messaging Infrastructure 10 may include any hardware 
and/or software suitably configured to interface with the 



various components of File Services System 5. Messaging 
Infrastructure 10 may also facilitate interfaces such as, for 
example, service requests and responses, which may 
transmit between both internal File Services System 5 
components and external components. Messaging Infras- 
tructure 10 facilitates the workflow management of files 
through File Services System 5. 

[0021] Application Server 15 is any hardware and/or software 
suitably configured to interface with Web Server 20 and 
Messaging Infrastructure 10. Clients (which may include 
both individual users and external systems) connect over 
internal and external network connections to Web server 
20. Web server 20 then routes requests to Application 
Server 15. Application Server 15 may transform web re- 
quests into File Service System 5 requests and route the 
requests over Messaging Infrastructure 10 to Centralized 
File Management Hub 60. 

[0022] Manager interface 25 is any hardware and/or software 

suitably configured to interface with File Services System 5 
via web server 20 and application server 15 or via any 
other network or communication system discussed herein. 
In one embodiment, manager interface 25 facilitates a 
controller inserting configuration information and/or 



viewing tracking information. Examples of configuration 
information may include the client authentication infor- 
mation, the roles defined for the client's that indicate 
which activities the client is authorized to perform, the file 
workflow configuration which may include how the files 
are routed through the File Services System 5 components 
and what services will be requested of each component. 
Examples of tracking information may include the out- 
come of a workflow task. More specifically, once a file 
services workflow task begins, significant events are 
noted along with data and statistics related to these 
events. These workflow events are maintained in a track- 
ing repository for internal and external, business and 
technical constituents with varying roles and access rights 
to view. Manager attempts to ensure that the parameters 
are sent to the necessary File Services System 5 compo- 
nents upon receipt of data, and in time for execution. Re- 
ceipt of data generally refers to the bulk package (i.e., file) 
of business data upon which a File Service System 5 com- 
ponent is to perform a service. The parameters may refer 
to the service parameters, which service to perform and 
necessary information to perform the service. 
[0023] pile Transformation component 40 is any hardware and/or 



software suitably configured to use enterprise logic to re- 
format, validate and/or enrich the data flowing through 
File services system 5. Enterprise logic may include the 
business rules that are applied to the data content. For 
example, specific field content within a file may specify a 
value and the business may have rules in place about what 
field values are considered acceptable. 
[0024] Reformatting the data may include, for example, arrang- 
ing data within a file in a format that is convenient to the 
client or in a format that is a standard in the client's in- 
dustry. The destination application that will receive this 
data may not recognize the initial representation of the 
data; therefore, that data is rearranged in a format the 
destination can recognize and process. This may be 
needed as data flows between recently developed systems 
where data is represented in formats such as XML and 
legacy systems, wherein data is organized in fixed record 
representations. Validating data may include, for example, 
ensuring that the data includes syntactical integrity as re- 
ceived from the client. Enriching the data includes, for ex- 
ample, data provided by the client that may be incom- 
plete, and as such, File Transformation component 40 
provides supplemental information in order for the data to 



be properly processed by the destination system. File 
Transformation component 40 functions may be based on 
a set of configurable and adaptable business rules. File 
Transformation component 40 may define a transforma- 
tion map and apply the map to the file. 
[0025] The transformation map may include, for example, inputs, 
outputs and validation rules. Inputs and Outputs to the 
transformation map may include bulk data (files) or mes- 
sages. For example, a transformation map may split a file 
into several other files to be routed to other File Services 
System 5 components. It may also be segmented into 
messages that can be routed to an interactive messaging 
application. In addition, the transformation map may be a 
consolidation of files with many files as input and a single 
file as output. Validation rules may include, for example, 
business rules that are applied to specific fields within a 
file to determine whether the content of the file is valid. In 
one embodiment, File Transformation 40 components and 
functions may be distributed to preserve network band- 
width and to provide powerful processing for large file 
transformations near the point of presence for File Trans- 
fer Services 5. Near the point of presence may include, for 
example, the proximity region within the same network 



segment. If a client sends a large file to a specific regional 
File Transfer Agent and the end destination of this file is 
within this region, the intent is to not transmit this data 
over the network to another region to be transformed and 
then retransmitted back to the region thereby wasting 
network resources. Rather, the system includes a File 
Transformation component physically close to the File 
Transfer Agent to make use of high-speed connections 
available when components are locally networked. 

[0026] Centralized File Management Hub 60 may include any 

hardware and/or software suitably configured to interface 
with Messaging Infrastructure 10 and include other com- 
ponents such as, for example, Parameter and Configura- 
tion Management 62, Tracking and Monitoring component 
64, and File Routing and Workflow component 66. Cen- 
tralized File Management Hub 60 may also interface with 
Data of Record 50. 

[0027] Parameter and Configuration Management component 62 
may include any hardware and/or software suitably con- 
figured to store parameter and configuration information 
used for the File Services System 5. Examples of parame- 
ter and configuration information may include, the client 
authentication information, the roles defined for each 



client that indicates what activities the client is authorized 
to perform, the file transfer protocol and device configu- 
ration, the file workflow configuration that may include 
how the files are routed through the File Services System 5 
components and what services will be requested of each 
File Services System 5 component. As discussed above, 
the parameter and configuration information may be re- 
ceived from the Manager via Manager interface 25. In one 
embodiment, the Parameter and Configuration Manage- 
ment component 62 is a centralized component that may 
be a gateway to store/ retrieve parameter and configura- 
tion information such as, for example, an enterprise's ac- 
cess control to the system, file transfer routing informa- 
tion, file retention information, and communication chan- 
nel parameter information through a network (e.g., Inter- 
net or Intranet). The information stored in this repository 
may affect the execution of the File Services System 5, the 
access and functionality available to individual users, and 
the services to apply to each set of data received. Also, 
parameter and configuration information may affect the 
types of files a client may send or receive, how long these 
files may reside within the system, how the client may 
send or receive files, what workflow path a file may follow 



through the file services components, the type of valida- 
tion, the type of transformation that may be applied to the 
data, and the like. 
[0028] pile Tracking and Monitoring component 64 is any hard- 
ware and/or software suitably configured to track a file, 
provide the status of particular workflow and/or to report 
on the health of the overall file system. Each File Services 
System component 5 may report file workflow events via a 
prescribed messaging infrastructure to File Tracking and 
Monitoring component 64. File Tracking and Monitoring 
component 64 may record these events within a tracking 
repository (not shown). File Tracking and Monitoring com- 
ponent 64 may also proactively generate alerts based on 
configurable thresholds and events. For example, within 
Parameter and Configuration Management component 62, 
alerts, errors or event thresholds may be defined on a 
client-by-client basis. Also, File Tracking and Monitoring 
component 64 may be configured to alert if a client at- 
tempts to perform an unauthorized task over a defined 
period of time and a number of occurrences over a de- 
fined threshold. In another embodiment, if an event was 
expected to occur within a defined time period, but it 
failed to occur, File Tracking and Monitoring component 



64 may perform an alert, if appropriately configured. File 
service 100 components may communicate with File 
Tracking and Monitoring component 64 using open mes- 
saging schema via Messaging Infrastructure 10. A man- 
ager may input open messaging schema using standard 
messaging protocols (e.g., SOAP, XML) into File Tracking 
and Monitoring component 64 via Manager interface 25. 
File Tracking and Monitoring component 64 may control 
access to the audit data through roles-based, access hier- 
archy. A user may have many roles (i.e., technical support, 
external client) and these roles may also be segmented by 
business entities and/or regionally. These roles may de- 
fine what information the user can access, and how the 
user accesses the information. Users may access the data 
from the File Tracking and Monitoring component 64 
through the web server which allows for customizable 
views of the information based on the user's role and ac- 
cess permissions, thereby allowing for role based multi- 
layer tracking information of a file. For example, a net- 
work support user may need to only view information at 
the network protocol level (i.e., number of bytes within a 
data packet, transmission errors); a business support user 
may be more interested in content and how a business 



rule is applied to a specific file; or, a client user may be 
restricted to viewing only the data that either originated 
from their system or is destined to be sent to their sys- 
tem. 

[0029] This roles-based access may facilitate a user obtaining 
and servicing the status of a particular workflow. For ex- 
ample, each workflow may be comprised of tasks per- 
formed by File Services System component 5. The status 
or outcome of each task is reported by the File Services 
System component 5 performing the task. The next task 
in the workflow may be dependent on the outcome of the 
previous task. The status of what path the workflow is 
currently taking or completed is maintained within File 
Tracking and Monitoring component 64. Self-servicing by 
users allows them to view status information, maintain 
configuration, and address exceptions as they occur. Such 
self-servicing is facilitated by the roles-based access that 
may restrict what self-servicing a user can perform and to 
which defined workflows a user is authorized to view or 
maintain. 

[0030] File Routing and Workflow component 66 includes any 
hardware and/or software suitably configured to act as 
the decision center for each bulk data exchange instance. 



In one embodiment, File Routing and Workflow compo- 
nent 66 may facilitate routing or scheduling file transfers 
to various destinations using any supported protocol or 
method. Primary and alternate routes and schedules di- 
rected by File Routing and Workflow component 66 may 
be defined within Parameter and Configuration Manage- 
ment component 62. In one example of a workflow, a file 
may take alternate routes and schedules depending on 
factors such as system availability and load balancing 
constraints. File Routing and Workflow component 66 may 
also provide mailbox capabilities allowing users to retrieve 
their data. File Routing and Workflow component 66 may 
also request that value added services, such as file trans- 
formation or validation, be performed on the data. A file's 
workflow may be defined within Parameter and Configura- 
tion Management component 62 and may direct workflow 
routes which are dependent on the outcome of previous 
workflow tasks and/or the availability of File Services Sys- 
tem components 5 for subsequent workflow tasks. Value- 
added services (e.g., services in addition to file routing) 
may be configured as part of the file's workflow. 
[0031] pile Routing and Workflow component 66 may also deter- 
mine what services are needed on a specific set of data 



(based on configured setup information) such that the 
outcome of each of the services may dictate the next step 
within the workflow. File Routing and Workflow compo- 
nent 66 may also be aware of multiple delivery paths to 
destinations and may facilitate routing based upon the 
availability of those delivery paths, thereby providing a 
more robust file delivery system. In one embodiment, File 
Routing and Workflow component 66 may route the file 
through a network and provide the routing information to 
File Transfer nodes to route/schedule the file transfer to 
various destinations using the supported file transfer 
methods. 

[0032] D a ta of Record database 50 includes any hardware and/or 
software suitably configured to store file service records. 
In one embodiment, Data of Record database 50 inter- 
faces with Centralized File Management Hub 60. Any 
databases discussed herein may be any type of database, 
such as relational, hierarchical, graphical, object-oriented, 
and/or other database configurations. Common database 
products that may be used to implement the databases 
include DB2 by IBM (White Plains, NY), various database 
products available from Oracle Corporation (Redwood 
Shores, CA), Microsoft Access or Microsoft SQL Server by 



Microsoft Corporation (Redmond, Washington), or any 
other suitable database product. Moreover, the databases 
may be organized in any suitable manner, for example, as 
data tables or lookup tables. Each record may be a single 
file, a series of files, a linked series of data fields or any 
other data structure. Association of certain data may be 
accomplished through any desired data association tech- 
nique such as those known or practiced in the art. For ex- 
ample, the association may be accomplished either manu- 
ally or automatically. Automatic association techniques 
may include, for example, a database search, a database 
merge, CREP, AGREP, SQL, and/or the like. The association 
step may be accomplished by a database merge function, 
for example, using a "key field" in pre-selected databases 
or data sectors. 

[0033] M 0re particularly, a "key field" partitions the database ac- 
cording to the high-level class of objects defined by the 
key field. For example, certain types of data may be des- 
ignated as a key field in a plurality of related data tables 
and the data tables may then be linked on the basis of the 
type of data in the key field. The data corresponding to 
the key field in each of the linked data tables is preferably 
the same or of the same type. However, data tables having 



similar, though not identical, data in the key fields may 
also be linked by using AGREP, for example. In accordance 
with one aspect of the present invention, any suitable data 
storage technique may be utilized to store data without a 
standard format. Data sets may be stored using any suit- 
able technique, including, for example, storing individual 
files using an ISO/IEC 7816-4 file structure; implementing 
a domain whereby a dedicated file is selected that ex- 
poses one or more elementary files containing one or 
more data sets; using data sets stored in individual files 
using a hierarchical filing system; data sets stored as 
records in a single file (including compression, SQL acces- 
sible, hashed via one or more keys, numeric, alphabetical 
by first tuple, etc.); block of binary (BLOB); stored as un- 
grouped data elements encoded using ISO/IEC 7816-6 
data elements; stored as ungrouped data elements en- 
coded using ISO/IEC Abstract Syntax Notation (ASN.l) as 
in ISO/IEC 8824 and 8825; and/or other proprietary tech- 
niques that may include fractal compression methods, im- 
age compression methods, etc. 
[0034] | n one exemplary embodiment, the ability to store a wide 
variety of information in different formats is facilitated by 
storing the information as a Block of Binary (BLOB). Thus, 



any binary information can be stored in a storage space 
associated with a data set. As discussed above, the binary 
information may be stored on the financial transaction in- 
strument or external to but affiliated with the financial 
transaction instrument. The BLOB method may store data 
sets as ungrouped data elements formatted as a block of 
binary via a fixed memory offset using either fixed stor- 
age allocation, circular queue techniques, or best prac- 
tices with respect to memory management (e.g., paged 
memory, least recently used, etc.). By using BLOB meth- 
ods, the ability to store various data sets that have differ- 
ent formats facilitates the storage of data associated with 
the financial transaction instrument by multiple and unre- 
lated owners of the data sets. For example, a first data set 
which may be stored may be provided by a first party, a 
second data set which may be stored may be provided by 
an unrelated second party, and yet a third data set which 
may be stored, may be provided by an third party unre- 
lated to the first and second party. Each of these three ex- 
emplary data sets may contain different information that 
is stored using different data storage formats and/or 
techniques. Further, each data set may contain subsets of 
data that also may be distinct from other subsets. 



[0035] As stated above, in various embodiments of the present 
invention, the data can be stored without regard to a 
common format. However, in one exemplary embodiment 
of the present invention, the data set (e.g., BLOB) may be 
annotated in a standard manner when provided for ma- 
nipulating the data onto the financial transaction instru- 
ment. The annotation may comprise a short header, 
trailer, or other appropriate indicator related to each data 
set that is configured to convey information useful in 
managing the various data sets. For example, the annota- 
tion may be called a "condition header", "header", "trailer", 
or "status", herein, and may comprise an indication of the 
status of the data set or may include an identifier corre- 
lated to a specific issuer or owner of the data. In one ex- 
ample, the first three bytes of each data set BLOB may be 
configured or configurable to indicate the status of that 
particular data set; e.g., LOADED, INITIALIZED, READY, 
BLOCKED, REMOVABLE, or DELETED. Subsequent bytes of 
data may be used to indicate for example, the identity of 
the issuer, user, transaction/membership account identi- 
fier or the like. Each of these condition annotations is fur- 
ther discussed herein. 

[0036] The data set annotation may also be used for other types 



of status information as well as various other purposes. 
For example, the data set annotation may include security 
information establishing access levels. The access levels 
may, for example, be configured to permit only certain in- 
dividuals, levels of employees, companies, or other enti- 
ties to access data sets, or to permit access to specific 
data sets based on the transaction, merchant, issuer, user 
or the like. Furthermore, the security information may re- 
strict/permit only certain actions such as accessing, mod- 
ifying, and/or deleting data sets. In one example, the data 
set annotation indicates that only the data set owner or 
the user are permitted to delete a data set, various identi- 
fied merchants are permitted to access the data set for 
reading, and others are altogether excluded from access- 
ing the data set. However, other access restriction param- 
eters may also be used allowing various entities to access 
a data set with various permission levels as appropriate. 
[0037] The data, including the header or trailer may be received 
by a stand-alone interaction device configured to add, 
delete, modify, or augment the data in accordance with 
the header or trailer. As such, in one embodiment, the 
header or trailer is not stored on the transaction device 
along with the associated issuer-owned data but instead 



the appropriate action may be taken by providing to the 
transaction instrument user at the stand-alone device, the 
appropriate option for the action to be taken. The present 
invention may contemplate a data storage arrangement 
wherein the header or trailer, or header or trailer history, 
of the data is stored on the transaction instrument in rela- 
tion to the appropriate data. 

[0038] one skilled in the art will also appreciate that, for security 
reasons, any databases, systems, devices, servers or other 
components of the present invention may consist of any 
combination thereof at a single location or at multiple lo- 
cations, wherein each database or system includes any of 
various suitable security features, such as firewalls, access 
codes, encryption, decryption, compression, decompres- 
sion, and/or the like. 

[0039] using the foregoing system components, the invention 
may include the following method. Manager Interface 25 
may allow any manager to interface with File Services Sys- 
tem 5 via web server 20 and applications server 15 (or any 
other network discussed herein), thereby allowing the 
manager to insert parameter and/or configuration infor- 
mation or view tracking information. The parameter and 
configuration information is stored in Parameter and Con- 



figuration Management component 62. 
[0040] | n an exemplary embodiment, a user may access the File 
services system 5 to retrieve a file from Data of Record 
50. As used herein, a "file" may include data, executables, 
programs, applications, messages, or any other informa- 
tion. The user may access the system through either In- 
ternet 36, Intranet 38 or any other network discussed 
herein. File Transfer Applications Server 32 may receive 
the request (via web server 34 if through the internet 36) 
and transmit the request to Messaging Infrastructure 10. 
File Transfer Services 30 may receive the request and File 
Transfer Agent 39 may direct the request through File 
Transformation Server 40 to reformat, validate and enrich 
the data using enterprise logic. In an exemplary embodi- 
ment, meta-data may be used that describes how enter- 
prise logic (e.g., the set of business rules) is applied (i.e., 
for validation, reformatting) and stored in Data of Record 
50 accessible through Parameter and Configuration Man- 
agement component 62. The business rules may be de- 
fined using a business rules definitions tool within File 
Transformation component 40 and then may be stored by 
Parameter and Configuration Management 62. For exam- 
ple, the workflow rules for a file may be defined within 



Data of Record 50. Within one of the workflow steps may 
be a transformation. The business mapping rules may also 
be stored within Data of Record 50. The workflow compo- 
nent may request this information from Data of Record 50 
and then form a request for a file transformation by File 
Transformation component 40. File Transformation Server 
40 may also define a transformation map and apply the 
map to the file in a similar manner as discussed above. 
Once File Transformation Server 40 has completed any di- 
rected file transformation, the file request may be trans- 
mitted to the Centralized File Management Hub 60 via a 
Messaging Infrastructure 10. Before, during or after Cen- 
tralized File Management Hub 60 obtains the requested 
file from Data of Record 50, Centralized File Management 
Hub 60 may suitably process the request or the file using 
any one or more of its components, namely Parameter and 
Configuration Management 62, File Tracking and Monitor- 
ing 64, and File Routing and Workflow 66. The manner in 
which the file is moved or changed and which File Services 
System component 5 performs the work on a file within 
File Services System 5 may be dictated by the workflow 
defined by Parameter and Configuration Management 
component 62. The file may then be transmitted to the 



Messaging Infrastructure 10 that allows the File Transfer 
Services 30 to deliver the requested file. 

[0041] one skilled in the art may appreciate that the File services 
system components are not limited to those described 
herein. The present invention provides a system and 
method for effectively moving files electronically, in a se- 
cure and efficient manner. The present invention de- 
scribes a comprehensive system that encompasses indus- 
try leading, file management and movement software to 
address the needs of Enterprises. The system is generic 
and customizable such that a basic outline for file man- 
agement exists, yet allows the specific needs of the Enter- 
prise to tailor the system. As such, any additional software 
or hardware components now known or developed in the 
future that enhances the scope of the described invention, 
may not act to limit the herein described invention. 

[0042] Th e present invention may be described herein in terms of 
functional block components, screen shots, optional se- 
lections and various processing steps. It should be appre- 
ciated that such functional blocks may be realized by any 
number of hardware and/or software components config- 
ured to perform the specified functions. For example, the 
present invention may employ various integrated circuit 



components, e.g., memory elements, processing ele- 
ments, logic elements, look-up tables, and the like, which 
may carry out a variety of functions under the control of 
one or more microprocessors or other control devices. 
Similarly, the software elements of the present invention 
may be implemented with any programming or scripting 
language such as C, C+ + , Java, COBOL, assembler, PERL, 
Visual Basic, SQL Stored Procedures, extensible markup 
language (XML), with the various algorithms being imple- 
mented with any combination of data structures, objects, 
processes, routines or other programming elements. Fur- 
ther, it should be noted that the present invention may 
employ any number of conventional techniques for data 
transmission, signaling, data processing, network control, 
and the like. Still further, the invention could be used to 
detect or prevent security issues with a client-side script- 
ing language, such as JavaScript, VBScript or the like. For a 
basic introduction of cryptography and network security, 
see any of the following references: (1) "Applied Cryptog- 
raphy: Protocols, Algorithms, And Source Code In C," by 
Bruce Schneier, published by John Wiley & Sons (second 
edition, 1996); (2) "Java Cryptography," by Jonathan Knud- 
son, published by O'Reilly & Associates (1998); (3) "Cryp- 



tography & Network Security: Principles & Practice," by 
William Stallings, published by Prentice Hall; all of which 
are hereby incorporated by reference. 

[0043] As will be appreciated by one of ordinary skill in the art, 
the present invention may be embodied as a method, a 
data processing system, a device for data processing, 
and/or a computer program product. Accordingly, the 
present invention may take the form of an entirely soft- 
ware embodiment, an entirely hardware embodiment, or 
an embodiment combining aspects of both software and 
hardware. Furthermore, the present invention may take 
the form of a computer program product on a computer- 
readable storage medium having computer-readable pro- 
gram code means embodied in the storage medium. Any 
suitable computer-readable storage medium may be uti- 
lized, including hard disks, CD-ROM, optical storage de- 
vices, magnetic storage devices, and/or the like. 

[0044] The present invention is described herein with reference 
to screen shots, block diagrams and flowchart illustrations 
of methods, apparatus (e.g., systems), and computer pro- 
gram products according to various aspects of the inven- 
tion. It will be understood that each functional block of 
the block diagrams and the flowchart illustrations, and 



combinations of functional blocks in the block diagrams 
and flowchart illustrations, respectively, can be imple- 
mented by computer program instructions. These com- 
puter program instructions may be loaded onto a general 
purpose computer, special purpose computer, or other 
programmable data processing apparatus to produce a 
machine, such that the instructions that execute on the 
computer or other programmable data processing appa- 
ratus create means for implementing the functions speci- 
fied in the flowchart block or blocks. 
[0045] These computer program instructions may also be stored 
in a computer-readable memory that can direct a com- 
puter or other programmable data processing apparatus 
to function in a particular manner, such that the instruc- 
tions stored in the computer-readable memory produce 
an article of manufacture including instruction means 
which implement the function specified in the flowchart 
block or blocks. The computer program instructions may 
also be loaded onto a computer or other programmable 
data processing apparatus to cause a series of operational 
steps to be performed on the computer or other pro- 
grammable apparatus to produce a computer-imple- 
mented process such that the instructions which execute 



on the computer or other programmable apparatus pro- 
vide steps for implementing the functions specified in the 
flowchart block or blocks. 
[0046] Accordingly, functional blocks of the block diagrams and 
flowchart illustrations support combinations of means for 
performing the specified functions, combinations of steps 
for performing the specified functions, and program in- 
struction means for performing the specified functions. It 
will also be understood that each functional block of the 
block diagrams and flowchart illustrations, and combina- 
tions of functional blocks in the block diagrams and 
flowchart illustrations, can be implemented by either spe- 
cial purpose hardware-based computer systems which 
perform the specified functions or steps, or suitable com- 
binations of special purpose hardware and computer in- 
structions. 

[0047] Benefits, other advantages, and solutions to problems 
have been described herein with regard to specific em- 
bodiments. However, the benefits, advantages, solutions 
to problems, and any element(s) that may cause any ben- 
efit, advantage, or solution to occur or become more pro- 
nounced are not to be construed as critical, required, or 
essential features or elements of any or all the claims or 



the invention. As used herein, the terms "comprises", 
"comprising", or any other variation thereof, are intended 
to cover a non-exclusive inclusion, such that a process, 
method, article, or apparatus that comprises a list of ele- 
ments does not include only those elements but may in- 
clude other elements not expressly listed or inherent to 
such process, method, article, or apparatus. Further, no 
element described herein is required for the practice of 
the invention unless expressly described as "essential" or 
"critical". 



